Package
com.sec.enterprise.knox.cloudmdm.smdms
Knox Enrollment Service
42device profiles
63observations
0user-facing hits
2 Jun 2026last seen
Package intelligence
Observed signing, permission, version and size signals from contributing devices - descriptive of that sample, not a verdict. These come from the v2 Package Search sync, which not every device has contributed to yet, so for some packages this detail is partial or not present at all.
2
signing certs
OEM-forked / varies
117
permissions
largest set observed
5.1 MB – 12.6 MB
APK size
29 – 37
target SDK
2.2.14 → 2.4.00.3
versions observed
14
device profiles
- Signed by the device maker's own signing key (Samsung), so it is an OEM preinstall, but 2 different certificates appear across the fleet, so OEMs ship their own builds of it.
- Its largest observed manifest declares 117 permissions: 2 runtime (user-granted), 24 signature or system-level, 12 install-time and 79 vendor or uncatalogued.
- APK size ranges from 5.1 MB to 12.6 MB across the reporting device profiles, so the build differs substantially between them.
- Reported as an updated system app on 2 of 14 profiles - a newer build is installed over the one in the system image there.
Declared permissions (117)
Largest permission set observed for this package. Text is Android's own published description where one exists; platform permissions Android does not document show their granted protection level (in grey) instead; vendor or unknown constants show the name only.
| Permission | Description |
|---|---|
ACCESS_NETWORK_STATE |
Allows the app to view information about network connections such as which networks exist and are connected. |
ACCESS_PDB_STATE |
Signature-level system permission, for platform-signed apps. |
ACCESS_WIFI_STATE |
Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. |
BIND_DEVICE_ADMIN |
Signature-level system permission, for platform-signed apps. docs ↗ |
CAMERA |
This app can take pictures and record videos using the camera while the app is in use. |
CHANGE_WIFI_STATE |
Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks. |
DELETE_PACKAGES |
Signature or privileged system permission. |
DISPATCH_PROVISIONING_MESSAGE |
Signature or privileged system permission. |
FOREGROUND_SERVICE |
Allows the app to make use of foreground services. |
FOREGROUND_SERVICE_SYSTEM_EXEMPTED |
Allows the app to make use of foreground services with the type "systemExempted" |
GET_TASKS |
Allows the app to retrieve information about currently and recently running tasks. This may allow the app to discover information about which applications are used on the device. |
INSTALL_PACKAGES |
Signature or privileged system permission. |
INTERACT_ACROSS_USERS_FULL |
Signature-level system permission, for platform-signed apps. |
INTERNET |
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. |
INVOKE_CARRIER_SETUP |
Signature or privileged system permission. |
MANAGE_DEVICE_ADMINS |
Signature-level system permission, for platform-signed apps. |
MANAGE_PROFILE_AND_DEVICE_OWNERS |
Allows apps to set the profile owners and the device owner. |
MANAGE_USERS |
Signature or privileged system permission. |
MASTER_CLEAR |
Signature or privileged system permission. |
NFC |
Allows the app to communicate with Near Field Communication (NFC) tags, cards, and readers. |
OEM_UNLOCK_STATE |
Signature-level system permission, for platform-signed apps. |
POST_NOTIFICATIONS |
Allows the app to show notifications |
QUERY_ALL_PACKAGES |
Allows an app to see all installed packages. |
READ_OEM_UNLOCK_STATE |
Signature or privileged system permission. |
READ_PRIVILEGED_PHONE_STATE |
Signature or privileged system permission. docs ↗ |
REAL_GET_TASKS |
Signature or privileged system permission. |
REBOOT |
Signature or privileged system permission. |
RECEIVE_BOOT_COMPLETED |
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running. |
SET_PREFERRED_APPLICATIONS |
Signature-level system permission, for platform-signed apps. |
SET_PROCESS_LIMIT |
Signature or privileged system permission. |
SET_TIME |
Signature or privileged system permission. |
SET_WALLPAPER |
Allows the app to set the system wallpaper. |
START_ACTIVITIES_FROM_BACKGROUND |
Signature or privileged system permission. docs ↗ |
START_FOREGROUND_SERVICES_FROM_BACKGROUND |
Signature or privileged system permission. |
STATUS_BAR |
Signature or privileged system permission. |
WAKE_LOCK |
Allows the app to prevent the phone from going to sleep. |
WRITE_SECURE_SETTINGS |
Signature or privileged system permission. |
WRITE_SETTINGS |
Allows the app to modify the system's settings data. Malicious apps may corrupt your system's configuration. |
sec.ENTERPRISE_DEVICE_ADMIN |
- |
sec.MDM_APP_BACKUP |
- |
sec.MDM_APP_MGMT |
- |
sec.MDM_APP_PERMISSION_MGMT |
- |
sec.MDM_BLUETOOTH |
- |
sec.MDM_BROWSER_SETTINGS |
- |
sec.MDM_CALLING |
- |
sec.MDM_CERTIFICATE |
- |
sec.MDM_DATE_TIME |
- |
sec.MDM_HW_CONTROL |
- |
sec.MDM_INVENTORY |
- |
sec.MDM_KIOSK_MODE |
- |
sec.MDM_LOCATION |
- |
sec.MDM_MULTI_USER_MGMT |
- |
sec.MDM_PHONE_RESTRICTION |
- |
sec.MDM_RESTRICTION |
- |
sec.MDM_ROAMING |
- |
sec.MDM_SECURITY |
- |
sec.MDM_SMARTCARD |
- |
sec.MDM_UMC_INTERNAL |
- |
sec.MDM_WIFI |
- |
com.google.android.c2dm.permission.RECEIVE |
- |
com.samsung.account.business.permission.USE_ACCOUNT |
- |
com.samsung.android.knox.client.sdk.PROVIDER_ACCESS |
- |
com.samsung.android.knox.client.sdk.permission.BASE_MESSAGING |
- |
com.samsung.android.knox.efota.action.permission |
- |
com.samsung.android.knox.efota.permission.ACCESS_EFOTA_PROVIDER |
- |
com.samsung.android.knox.permission.KNOX_ANALYTICS_INTERNAL |
- |
com.samsung.android.knox.permission.KNOX_APP_MGMT |
- |
com.samsung.android.knox.permission.KNOX_ATTESTATION |
- |
com.samsung.android.knox.permission.KNOX_BLUETOOTH |
- |
com.samsung.android.knox.permission.KNOX_BROWSER_SETTINGS |
- |
com.samsung.android.knox.permission.KNOX_CCM |
- |
com.samsung.android.knox.permission.KNOX_CCM_KEYSTORE |
- |
com.samsung.android.knox.permission.KNOX_CERTIFICATE |
- |
com.samsung.android.knox.permission.KNOX_CERTIFICATE_ENROLLMENT |
- |
com.samsung.android.knox.permission.KNOX_CUSTOM_SETTING |
- |
com.samsung.android.knox.permission.KNOX_CUSTOM_SYSTEM |
- |
com.samsung.android.knox.permission.KNOX_DATE_TIME |
- |
com.samsung.android.knox.permission.KNOX_DEVICE_CONFIGURATION |
- |
com.samsung.android.knox.permission.KNOX_DEX |
- |
com.samsung.android.knox.permission.KNOX_DUAL_DAR_INTERNAL |
- |
com.samsung.android.knox.permission.KNOX_ENHANCED_ATTESTATION |
- |
com.samsung.android.knox.permission.KNOX_ENTERPRISE_DEVICE_ADMIN |
- |
com.samsung.android.knox.permission.KNOX_HW_CONTROL |
- |
com.samsung.android.knox.permission.KNOX_INTERNAL_EXCEPTION |
- |
com.samsung.android.knox.permission.KNOX_INVENTORY |
- |
com.samsung.android.knox.permission.KNOX_KES_INTERNAL |
- |
com.samsung.android.knox.permission.KNOX_KEYSTORE |
- |
com.samsung.android.knox.permission.KNOX_KIOSK_MODE |
- |
com.samsung.android.knox.permission.KNOX_LICENSE_INTERNAL |
- |
com.samsung.android.knox.permission.KNOX_LOCATION |
- |
com.samsung.android.knox.permission.KNOX_MULTI_USER_MGMT |
- |
com.samsung.android.knox.permission.KNOX_PHONE_RESTRICTION |
- |
com.samsung.android.knox.permission.KNOX_REMOTE_ATTESTATION |
- |
com.samsung.android.knox.permission.KNOX_RESTRICTION_MGMT |
- |
com.samsung.android.knox.permission.KNOX_ROAMING |
- |
com.samsung.android.knox.permission.KNOX_SECURITY |
- |
com.samsung.android.knox.permission.KNOX_TIMA_KEYSTORE |
- |
com.samsung.android.knox.permission.KNOX_UCM_INTERNAL |
- |
com.samsung.android.knox.permission.KNOX_WIFI |
- |
com.samsung.android.knox.ppclient.permission.KNOX_PRIVACY_POLICY |
- |
com.samsung.android.knoxguard.STATUS |
- |
com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER |
- |
com.samsung.android.security.permission.SAMSUNG_KEYSTORE_PERMISSION |
- |
com.samsung.permission.WIFI_FACTORY_TEST |
- |
com.sec.android.SAMSUNG_AASASERVICE |
- |
com.sec.enterprise.knox.cloudmdm.smdms.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION |
- |
com.sec.enterprise.knox.cloudmdm.smdms.SUPPORT_PERMISSION |
- |
com.sec.enterprise.knox.cloudmdm.smdms.permission.SAMSUNG_MDM_SERVICE |
- |
com.sec.enterprise.knox.permission.CUSTOM_SETTING |
- |
com.sec.enterprise.knox.permission.CUSTOM_SYSTEM |
- |
com.sec.enterprise.knox.permission.KNOX_ATTESTATION |
- |
com.sec.enterprise.knox.permission.KNOX_CCM |
- |
com.sec.enterprise.knox.permission.KNOX_CERTENROLL |
- |
com.sec.enterprise.knox.permission.KNOX_DEACTIVATE_LICENSE |
- |
com.sec.enterprise.knox.permission.KNOX_KEYSTORE |
- |
com.sec.enterprise.permission.MDM_PROXY_ADMIN_INTERNAL |
- |
com.sec.knox.kccc.agent.permission.ACCESS_KCCLIENT_PROVIDER |
- |
Manage on devices
ADB commands for this package (the inverse of each is included so you can undo). Run from an authorised shell or wire the equivalent into your DPC. Verify on a test device first - this database doesn’t yet classify which packages are safe to change. --user 0 targets the current user; drop it (and use a privileged shell) to act device-wide.
Disable for the current user
adb shell pm disable-user --user 0 com.sec.enterprise.knox.cloudmdm.smdms
Remove for the current user - a per-user uninstall; the APK stays on
/system, so Restore re-adds it (-k keeps app data)adb shell pm uninstall -k --user 0 com.sec.enterprise.knox.cloudmdm.smdms
Re-enable
adb shell pm enable com.sec.enterprise.knox.cloudmdm.smdms
Restore (re-install for the current user)
adb shell pm install-existing com.sec.enterprise.knox.cloudmdm.smdms
Seen on
Each record is a device profile (make + model + Android version). Each unique handset that syncs against a matching profile will increase the observations of a package, thereby increasing confidence that a package is expected to be on a device.
| OEM | Model | Android | Provenance | Observations | Last seen |
|---|---|---|---|---|---|
| Samsung | SM-A125F | Android 12 | OEM Samsung | 1 | 21 Jan 2026 |
| Samsung | SM-A135F | Android 14 | OEM Samsung | 3 | 21 Jan 2026 |
| Samsung | SM-A137F | Android 14 | - | 1 | 17 Jan 2026 |
| Samsung | SM-A236B | Android 14 | OEM Samsung | 2 | 10 Apr 2026 |
| Samsung | SM-A266B | Android 15 | - | 2 | 21 Aug 2025 |
| Samsung | SM-A266B | Android 16 | - | 1 | 26 Jan 2026 |
| Samsung | SM-A346B | Android 14 | OEM Samsung | 1 | 4 Mar 2026 |
| Samsung | SM-A515F | Android 13 | - | 1 | 30 Jun 2025 |
| Samsung | SM-A528B | Android 13 | - | 1 | 19 Jun 2025 |
| Samsung | SM-A536B | Android 15 | - | 1 | 19 Jun 2025 |
| Samsung | SM-A556B | Android 15 | - | 1 | 1 Jul 2025 |
| Samsung | SM-A566B | Android 16 | - | 2 | 4 Nov 2025 |
| Samsung | SM-F721B | Android 15 | - | 1 | 9 Jul 2025 |
| Samsung | SM-F766B | Android 16 | - | 1 | 11 Nov 2025 |
| Samsung | SM-G766B | Android 15 | - | 1 | 17 Oct 2025 |
| Samsung | SM-G780F | Android 13 | OEM Samsung | 1 | 29 Dec 2025 |
| Samsung | SM-G973U | Android 12 | OEM Samsung | 2 | 28 May 2026 |
| Samsung | SM-G991B | Android 15 | OEM Samsung | 1 | 19 Apr 2026 |
| Samsung | SM-M315F | Android 12 | - | 1 | 2 Feb 2026 |
| Samsung | SM-N950U1 | Android 9.0 | - | 1 | 20 Aug 2025 |
| Samsung | SM-N986B | Android 13 | - | 9 | 17 Jul 2025 |
| Samsung | SM-S721U | Android 15 | - | 5 | 5 Aug 2025 |
| Samsung | SM-S906B | Android 15 | - | 1 | 2 Jun 2025 |
| Samsung | SM-S908U | Android 16 | OEM Samsung | 1 | 2 Jun 2026 |
| Samsung | SM-S921B | Android 15 | OEM Samsung | 2 | 22 Jul 2025 |
| Samsung | SM-S921B | Android 16 | OEM Samsung | 1 | 13 May 2026 |
| Samsung | SM-S921U | Android 15 | - | 1 | 19 Jun 2025 |
| Samsung | SM-S926B | Android 16 | OEM Samsung | 1 | 14 Apr 2026 |
| Samsung | SM-S928B | Android 16 | OEM Samsung | 1 | 25 Jan 2026 |
| Samsung | SM-S928U1 | Android 15 | - | 1 | 12 Sep 2025 |
| Samsung | SM-S931B | Android 15 | - | 1 | 20 Sep 2025 |
| Samsung | SM-S931B | Android 16 | - | 1 | 23 Nov 2025 |
| Samsung | SM-S936B | Android 16 | - | 1 | 18 Dec 2025 |
| Samsung | SM-S937B | Android 15 | - | 1 | 25 Aug 2025 |
| Samsung | SM-S938B | Android 15 | - | 2 | 25 Aug 2025 |
| Samsung | SM-S942B | Android 17 | OEM Samsung | 1 | 25 May 2026 |
| Samsung | SM-T636B | Android 15 | - | 2 | 12 Oct 2025 |
| Samsung | SM-T976B | Android 13 | - | 1 | 21 Jul 2025 |
| Samsung | SM-X200 | Android 14 | - | 1 | 27 Aug 2025 |
| Samsung | SM-X716B | Android 15 | - | 1 | 27 Jun 2025 |
| Samsung | SM-X910 | Android 14 | - | 1 | 26 Jun 2025 |
| Samsung | SM-X910 | Android 15 | - | 1 | 12 Sep 2025 |
Known labels
Locale-aware display names seen in the wild.
| Label | Locale | Seen |
|---|---|---|
| Enrollment Service | en-us | 14 |
| Knox Enrollment Service | en-gb | 12 |
| Enrollment Service | en-gb | 9 |
| Enrollment Service | en | 6 |
| Enrollment Service | it-IT | 5 |
| Enrollment Service | nl-nl | 5 |
| Knox Enrollment Service | es-us | 3 |
| Enrollment Service | es-ES | 2 |
| Enrollment Service | en-nl | 2 |
| Enrollment Service | de-de | 2 |
| Enrollment Service | es-es | 2 |
| Enrollment Service | it-it | 2 |
| Knox Enrollment Service | fr-fr | 2 |
| Knox Enrollment Service | 2 | |
| Knox Enrollment Service | en-us | 2 |
| Enrollment Service | pl-PL | 1 |
| Enrollment Service | en-au | 1 |
| Enrollment Service | en-GB | 1 |
| Enrollment Service | pl-pl | 1 |
| Enrollment Service | ru-ru | 1 |
| Knox Enrollment Service | fr-dz | 1 |
| Knox Enrollment Service | es-US | 1 |
| Knox Enrollment Service | fr-FR | 1 |
| Knox Enrollment Service | en-nl | 1 |
| Knox Enrollment Service | de-de | 1 |
| Knox Enrollment Service | en | 1 |
| Knox Enrollment Service | en-GB | 1 |
| Knox Enrollment Service | en-US | 1 |